BitLocker is the built-in full-disk encryption feature in Windows Pro, Enterprise, and Education editions. It encrypts the operating system drive and fixed data drives using AES-XTS, with optional TPM-backed pre-boot authentication.
Reviewed by Marcus Holmberg
BitLocker
learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker No ratings yet. Be the first.
Rate BitLocker: No account needed
Threat level
Covered
A covered pick. Anyone can use it as a private drop-in, with no setup or know-how. Enough for most people. Threat levels
Our take
BitLocker requires no installation and is the lowest-friction path to full-disk encryption for Windows users who already have a supported edition. TPM integration means the drive unlocks transparently at boot without a passphrase, which is convenient but also means physical access to the machine can defeat the protection if TPM pins are not set. It is closed-source and Microsoft holds the encryption design, which is a genuine trust consideration compared to open alternatives. A reasonable baseline for Windows device encryption, particularly in managed enterprise environments, but not the right tool if you need cross-platform access or verifiable open-source code.
Website at a glance
learn.microsoft.com
B score 75
Solid website security headers
Graded by Mozilla HTTP Observatory, tested 13d ago
Inspect this site yourself
Measures the security configuration of the tool's own website, not the privacy of the product itself. A strong tool can still score low here.
BitLocker alternatives
PrivacyNotes Zero-knowledge notes, tasks, files, passwords and journal secured by a single 12-word recovery phrase, with no email or password required. The crypto core and database schema are published for audit. No subscription model.
7-Zip File archiver with a high compression ratio and built-in encryption functionality.
FileVault FileVault is the built-in full-disk encryption feature in macOS. On Macs with Apple silicon or a T2 chip, data is encrypted by hardware by default; enabling FileVault adds a login-password gate that prevents decryption without your credentials.
VERNAM A free, fully client-side file encryptor that runs in your browser. Drop in any file, set or generate a passphrase, and it seals the result into its own .vrn format. Nothing is ever uploaded, and it works offline.
VeraCrypt It can create a virtual encrypted disk that works just like a regular disk but within a file. It can also encrypt a partition or the entire storage device with pre-boot…
Cryptomator Cryptomator encrypts your data quickly and easily. Afterwards you upload them protected to a cloud service.
* Average ratings will show on this page once the threshold of 5 ratings is reached.